POC-CVE-2023-3244

proof of concept for CVE-2023-3244 Hello, this is a simple Proof of Concept PoC for the CVE-2023-3244 vulnerability found in the WordPress plugin "comments-like-dislike". The vulnerability affects plugin versions up to and including 1.2.0. To exploit this vulnerability, you can refer to the Pytho...

security-research

Security Research This project hosts security advisories and their accompanying proof-of-concepts related to research conducted at Orange group. Responsible disclosure For each security issue discovered, Orange CERT informs vendor about the vulnerability. Proof of Concept will be not published in...

CVE-2025-2563-POC

This repository does not have a README...

CVE-2024-51179

CVE-2024-51179 : Flooding of Crafted packets from an Attacker can crash UPF/SMF in Open5gs Vulnerability Description Description: An issue in Open 5GS v.2.7.1 allows a remote attacker to cause a denial of servie via the Network Function Virtualizations NFVs such as the User Plane Function UPF and...

Werkzeug-CVE-2022-29361-PoC

Werkzeug-CVE-2022-29361-PoC...

CVE-2026-110912

In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr and inarpinput sys/netinet/ifether.c do not validate the hardware address length arhln and protocol address length arpln fields of incoming ARP packets. inarpreply then uses these attacker-controlled values as memcpy...

CVE-2026-110912

In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr and inarpinput sys/netinet/ifether.c do not validate the hardware address length arhln and protocol address length arpln fields of incoming ARP packets. inarpreply then uses these attacker-controlled values as memcpy...

EUVD-2026-101819

In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr and inarpinput sys/netinet/ifether.c do not validate the hardware address length arhln and protocol address length arpln fields of incoming ARP packets. inarpreply then uses these attacker-controlled values as memcpy...

CVE-2026-110912

In DragonFly BSD (through 6.4.2 before 4bb22ff), the ARP input handlers arpintr() and in_arpinput() in sys/netinet/if_ether.c fail to validate the ar_hln and ar_pln fields of incoming ARP packets. Consequently, in_arpreply() uses these attacker-controlled values as memcpy lengths when copying fro...

CVE-2026-110912

In DragonFly BSD through 6.4.2 before 4bb22ff, the ARP input handlers arpintr and inarpinput sys/netinet/ifether.c do not validate the hardware address length arhln and protocol address length arpln fields of incoming ARP packets. inarpreply then uses these attacker-controlled values as memcpy...

bitbucket-cve-2022-36804

bitbucket-cve-2022-36804 CVE-2022-36804 Atlassian Bitbucket Command Injection Vulnerability POC Follow us YouTube Twitter Facebook LinkedIn...

CVE-2022-39425

CVE-2022-39425 CVE-2022-39425 PoC...

Apache-Log4j-POC

Apache-Log4j-POC CVE-2021-44228 Proof of Concept of apache log4j LDAP lookup vulnerability You can read more about the vulnerability here: https://blog.cloudflare.com/inside-the-log4j2-vulnerability-cve-2021-44228/ How to run the provided ldap server that returns malicious object ? java -jar...

CVE-2025-24813-PoC-Apache-Tomcat-RCE

Apache Tomcat CVE-2025-24813 Proof of Concept PoC A proof-of-concept exploit for the Apache Tomcat deserialization vulnerability CVE-2025-24813. This tool demonstrates how attackers could exploit insecure deserialization in Tomcat's session management. WARNING : This tool is for authorized securi...

CVE-2017-3881-exploit-cisco-

A vulnerability in the Cisco Cluster Management Protocol CMP processing code in Cisco IOS and Cisco IOS XE Software could allow an unauthenticated, remote attacker to cause a reload of an affected device or remotely execute code with elevated privileges. The Cluster Management Protocol utilizes...

CVE-2021-25461

CVE-2021-25461 This is a repo with the Proof of Concept for the CVE discovered for the SAUSAGE Security Analysis of Unix domain Socket usAGE in Android paper that was accepted to EuroS&P 2022. I worked on this paper with Mounir Elgharabawy, the one who discovered the vuln and wrote the Proof of...

CVE-2025-6018_Poc

CVE-2025-6018Poc Exploit for CVE-2025-6018...

cve-2024-0230-blue

cve-2024-0230-blue Helper script to POC of CVE-2024-0230 Bluetooth git clone https://github.com/keldnorman/cve-2024-0230-blue cd cve-2024-0230-blue chmod +x poc.sh sudo ./poc.sh...

sysctl_coalition_get_pid_list-dos

sysctlcoalitiongetpidlist-dos The sysctlcoalitiongetpidlist function in bsd/kern/syscoalition.c uses the coalitiongetpidlist function to collect a list of PIDs in a coalition. This function will return the number of PIDs if successful or a negative errno on failure. However, the...

CVE-2022-0847-DirtyPipe-Container-Breakout

DirtyPipe Container Breakout PoC This repo contains a PoC for the dirtypipe kernel vulnerability, for breaking out of a container. Further explanation can be found in this blog post...